Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: CYaRkScHzIbHbGtoE/WZKu71XZpy8MeICz+asAfNOFU=
Subject key identifier: C4:D9:AD:90:C5:79:55:A5:99:FA:33:A5:D1:1D:53:26:9F:A0:DB:A8
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0196C61584C2139EE1BAFF57D7306DC9C1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0343
Signing time: Mon 12 May 2025 20:00:21 +0000
Manifest this update: Mon 12 May 2025 20:00:21 +0000
Manifest next update: Tue 13 May 2025 20:00:21 +0000
Files and hashes: 1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: TtODXJKaRQWvEnRfG7GGl/kiHNkZw9NrSgyfbiCCF48=)
2: hXFvDfauLNPAF9WisFevrAfOB1o.roa (hash: +PM39yo15WknA3d/avFILeomoy0TBmCYWA48pwr5g+I=)
3: si-C49_gCXDqHgV15BpjmdVSEiE.roa (hash: M/s+DA7HYj5VOC6CBgokuKGD9N5LSw7UMOrHEdp5Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:84:c2:13:9e:e1:ba:ff:57:d7:30:6d:c9:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: May 12 20:00:21 2025 GMT
Not After : May 13 20:00:21 2025 GMT
Subject: CN=c4d9ad90c57955a599fa33a5d11d53269fa0dba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:7d:02:a4:46:8d:00:3c:24:c7:22:6e:ff:
1f:6a:cc:4a:7b:b5:21:94:83:9e:80:ea:bc:17:77:
fe:cf:8c:66:47:d3:89:b2:21:26:61:2b:75:4c:e9:
9a:d2:e0:f7:ad:31:8a:f8:85:85:77:90:9a:2e:e4:
8a:1d:52:61:1c:99:03:b8:b1:12:99:8d:eb:b3:ed:
40:93:e3:e5:9d:3c:e6:55:34:0d:f2:31:df:89:ad:
e0:ce:8b:55:df:0d:59:82:d3:92:b1:dd:1c:63:aa:
dd:8d:07:1f:41:0b:ab:0b:b2:bf:04:b8:14:19:aa:
c9:a3:40:3f:eb:b8:28:48:2b:b1:28:55:ae:49:4d:
22:81:4b:47:3a:7d:49:bf:ac:cb:51:97:8d:8b:3c:
f1:58:f0:a3:5d:39:17:1a:fe:fd:dd:df:50:58:b9:
93:d7:23:fa:62:4c:dc:f5:57:07:da:a8:c2:ad:d8:
59:02:7a:1c:51:17:fb:7c:09:d6:fe:d2:9b:d7:9d:
7b:62:1d:7b:ea:75:57:0a:42:db:be:0e:83:a0:c6:
e9:dc:c5:53:c2:9f:18:c2:c8:ac:ad:d0:31:48:04:
5d:01:72:73:3d:8c:13:5c:31:b2:d3:13:2c:7e:3c:
b2:6c:e2:5e:f4:67:98:82:34:7c:97:0a:cf:27:0b:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:AD:90:C5:79:55:A5:99:FA:33:A5:D1:1D:53:26:9F:A0:DB:A8
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:fd:1e:6b:d7:5b:07:d2:66:5c:78:c2:35:b3:35:da:3a:
49:be:c9:c2:24:c1:46:dd:f2:bd:9f:3f:f4:4e:65:81:78:65:
91:bf:9a:2a:ea:f3:c1:34:df:20:1b:24:67:70:dd:ca:ba:df:
ee:0c:9c:0c:f6:5c:7a:8e:55:61:57:f2:57:19:84:ac:df:a1:
cb:cd:a7:b5:1d:63:82:bd:65:cd:59:04:64:3f:06:c0:47:9a:
d5:82:b0:2a:18:4d:9b:e5:4b:cd:c5:2f:6e:c0:d1:60:a4:ea:
14:0a:83:23:51:d2:88:79:8a:e2:3e:82:e2:71:74:f4:e0:9a:
1b:05:87:89:8f:14:b0:fc:55:f2:7b:3b:18:a9:88:0e:12:33:
04:25:4e:9f:ab:29:57:6b:c4:3f:9c:dd:ce:1d:a4:a6:51:fa:
f3:1b:80:14:2d:7f:13:16:d1:50:90:b6:9b:56:bd:4d:b4:17:
a6:c7:68:7e:d4:b9:ef:b7:7a:6c:59:8a:36:c7:2d:dd:45:cc:
7a:8f:bb:5c:f8:c6:18:53:79:25:b9:c4:46:83:d9:9f:92:8b:
36:b4:03:79:47:f7:1f:ec:08:7c:30:0d:8f:89:7c:c5:27:d7:
f1:e6:cb:60:ce:34:35:02:de:14:6d:7d:f6:01:1d:cc:c1:c6:
00:59:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:53:46 2025 by rpki-client